Chrome Onboarding with ISE

[c.twobears]

Hello, has anyone had issues configuring Chrome Onboarding with ISE?

I've been working with Cisco TAC. They're confirmed with two different engineers that the ISE polices are correct.

The issue I'm running into is the Cisco Network Assistant fails when trying to pull the cert from ISE. The error is device failed to reach server. All settings have been configured correctly on the Google Admin Console as well. The only item that stands out to me is that on the Chrome devices, they certs from ISE for the trusted authority are under "Other" instead of "Authorities" under Chrome settings.

[kthiruve · Accepted solution]

Hi,

Here is a key ISE Chromebook onboarding resource you can use to assist with configuration gaps etc.

https://community.cisco.com/t5/security-documents/ise-chromebook-resources/ta-p/3703988

Basically you need to turn on DNS ACL and allow access to google and few other sites for NSP to work. Also make sure your DNS works.

Thanks

krishnan